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Abstract 

In this note we show that all languages in NP have very short (logarithmic 
size) quantum proofs which can be verified provided that two unentangled 
copies are given. We thus introduce a new complexity class QMAi og (2) and 
show that NP C QMAi og (2). This gives a new perspective when compared 
to the previously known result QMAi og = BQP. 

1 Introduction 

In classical complexity, the concept of proof is extensively used to define very inter- 
esting complexity classes such as NP, MA and IP. When allowing the verifier (and 
the prover) to be quantum, we obtain complexity classes such as QMA and QIP. 
Quantum complexity classes can sometimes turn out to have surprising properties. 
For example, in contrast with the classical case, we know that quantum interactive 
proofs can be restricted to three messages without making them less powerful; that 
is, QIP = QIP(3) jKWOOj . 

Because of the probabilistic nature of quantum computation, the most natural 
quantum generalisation of NP is QMA. This is the class of languages having short 
quantum proofs. A quantum proof obviously requires a quantum verifier but behaves 
similarly to a classical proof with regards to completeness and soundness. Since 
group-non-membership is in QMA fWatOOj . but is not known to be in MA, we have 
an example of a statement having short quantum proofs but no known short classical 
proof. 
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In this note we are interested in very short quantum proofs. By very short we 
mean of logarithmic size. Classically, when considering a polynomial-time verifier, 
the concept of logarithmic-size classical proofs is not interesting. Any language 
having very short classical proofs would also be in P, since one can go through every 
possible logarithmic length proof in polynomial time. 

In the quantum case, very short quantum proofs could be interesting. Any rea- 
sonable classical description of a quantum proof requires a polynomial number of 
bits and thus one cannot try all quantum proofs using a classical simulator. That 
being said, if the verifier is simple enough, the optimisation problem of finding a 
proof that makes the verifier accept with high enough probability can be turned into 
a semi-definite programming[ VB96, Ali95j problem of polynomial size. Thus, if the 
verifier is simple enough, then the language is in P. Also, if no restriction is put on 
the verifier, then it is still only in BQP [MW04| . 

Although we just argued that very short classical and quantum proofs seem un- 
interesting, by changing slightly the rules of the game we will get an interesting 
complexity class. We will show in this note that all languages in NP have very short 
quantum proofs that can be checked by a quantum verifier provided he is given two 
unentangled copies of it. We thus introduce a new complexity class QMAi og (2) and 
show that NP C QMA log (2). 

2 Definition and statement of result 

A formal definition of the class QMAi og (2) follows. Informally, it can be seen as the 
class of languages for which there exists a very short quantum proof. The peculiarity 
of the class is that two unentangled copies of the proof are required to convince the 
verifier. The verifier is polynomial-time and does not have to trust the prover that 
the two copies are identical, but he must assume that they are not entangled. One 
way to ensure that the two copies are not entangled could be to get them from two 
provers who have never interacted before. Another way would be in a context where 
there is a large number of such proofs and the verifier selects two of them at random. 
In that context, because of the quantum de Finetti theorem [KR05] , we know that 
the two proofs would be almost unentangled. We leave the careful analysis of that 
case for future work. 

Definition 2.1. A language L is in QMAi og (2) if there exists a BQP algorithm V, 
a polynomial p and a constant c such that the following two statements hold: 

1) if x G L, with \x\ = n, there exists a state \w) = \wi) <S> |u>2) £ ^® 6l °g(") j such 
that Pv[V(\w)) = accept] = 1. 
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2) if x L, with \x\ = n, then for all states \w) = \wi) (g) \w2) G (7Y 2 cog J , 
P[V(\w)) = accept] <l-^y. 

The main result of this note is that NP C QMAi og (2). This will be done by 
showing that the following well known NP-complete language is in QMAi og (2). 

Definition 2.2. 3COL is the set of graphs G = (V, E) (using any natural encoding 
into string) for which there exists a coloring C : V — > {0, 1, 2} such that for all (x, y) 
in E, C{x) ^ C(y). 

Theorem 2.3. NP C QMAi og (2) 

Proof. This will be proven in the next section by showing that 3COL is in QMAi og (2) . 
The verifier algorithm is described in the next section. Theorem 12 .81 will provide com- 
pleteness, and theorem 12. 141 will provide soundness. □ 



2.1 Useful results 

We will need the following notions of distance between pure quantum states and 
between classical probability distributions in our proof given in the next section. 

Definition 2.4. Dfltf), |$)) = ^1 - |(^|$)| 2 

Definition 2.5. Let P = {pi, ■ ■ ■ ,pk} and Q = {qx, • ■ • , qj~} be two probability dis- 
tributions. Then, D(P, Q) — | 52 i=1 \p% — q%\ ■ 

We will make use of the following relationship between the quantum and classical 
notions of distance [NCOOJ. 

Theorem 2.6. Let M be a von Neumann measurement. Let P and Q be the dis- 
tribution of outcomes when performing M on \^f) and on \<f>) respectively. Then 
D(|*),|$))>D(P,Q). 

In |BCWW0T] a very useful and simple test, called the swap-test, was intro- 
duced. This test can be used to verify that two unentangled registers contain the 
same pure state. We will not repeat the description of the test here but we will state 
the following useful fact. 

Theorem 2.7. When the swap-test is applied to and \<f>), it has a failure prob- 
ability of |- 
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2.2 Protocol and completeness 

In this section we describe the verifier for the language 3COL. The protocol descrip- 
tion might become more clear when reading the completeness proof that follows. 

Verifier for G, |#), 1$) 

The two copies of the proof and |<I>) are both regarded as vectors in H n <g> TC3, 
respectively the node and color part of the register. The verifier performs one of 
the following three tests with equal probability. If the test succeeds, he accepts, and 
otherwise he rejects. 

• Test 1: (Equality of the two registers), Perform the swap test on |\&) and |$) 
and reject if the test fails. 

• Test 2: (Consistency with the graph), |\&) and |$) are measured in the com- 
putational basis, yielding (i,C(i)), (i',C'(i)), 

a) if i = i', verify that C(i) = C'{i). 

b) otherwise if e E verify that C(i) ^ C'(i). 

• Test 3: (All nodes are present) For both |\l>) and |$), measure the index part 
of the register and the color part separately in the Fourier basis. If the outcome 
of the measurement of the color part is F 3 \0) and the outcome for the index 
part is not F„|0), then reject. 

The following theorem states that the protocol has completeness I. 

Theorem 2.8. If x e 3COL then there exists a proof that the verifier described 
earlier will accept with probability 1. 

Proof. Let the quantum proof be \$>) = |$) = ^ X)i |«) where C is a valid 
coloring of the graph G. Since |\&) = |$), we have that test 1 will always succeed. 
Because C is a valid coloring of G, we have that test 2 succeeds with probability 1. 
To see that test 3 will also succeed with certainty, it is sufficient to see that: 

3 3 & 

and therefore, if the color register is measured to be in state |0), the resulting state 
wfflbe-k£i|t)=F B |0). □ 
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2.3 Soundness 



Let's now consider the case where G 3COL. Theorem 12.141 at the end of this 
section states that if G is not 3-colorable, then there is a non- negligible probability 
that one of the three tests will fail. To prove this, we will require the following five 
simple lemmas. 

Because we know that the two registers given by the prover are not entangled, 
they can be written separately as 

i*> = E«m£a^> m = »;o>^;,./} 

i 3 i 3 

where J2i \ a i\ 2 = 1 an d Vz \fli,jf = 1 and likewise for |$). It is not hard to see 
that the use of unentangled mixed states would not help the prover. 

The following lemmas will give us some useful facts on the behavior of the state 
when measured in the computational basis. The next lemma says that if test 1 
succeeds with high enough probability, then the distribution of outcomes will be 
similar for the two states. 

Lemma 2.9. Let \^f) and |<&) be as defined earlier. If there exists a k and an I such 
that | \cikPk,i\ ~ \ a 'kfl'ki\ I — V"" 3 ^en test 1 (the swap test) will fail with probability 
at least 

Proof. Let Pjj = \ai(3ij\ 2 and Qij = la^jl 2 be the probability distributions when 
|$) and are measured in the computational basis. Then, 
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This means that K^l^)! 2 < 1 — and that test 1 (the swap test) will fail with 
probability at least □ 
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The next lemma states that nodes with a high enough probability of being ob- 
served have a well-defined color. 

Lemma 2.10. Given that the quantum proof passes test 1 and part a) of test 2 
with probability of failure no larger than g^, it must be that Vz such that \aii\ > 
4* 3\j such that \(3ij\ 2 > 

Proof. Suppose for the sake of contradiction that there exists an i such that \cti\ 2 > 
for which two of the /3jj have a square norm larger than 1/200. Hence, w.l.o.g we can 
assume that |/3j j0 | > 1/200 and > 1/200. Because of lemma [231 we have that 

K| 2 > \ a i\ 2 IA,i| 2 - ^3 > 20^? _ Therefore, the probability of obtaining 

(i,0) when measuring and (i, 1) when measuring |$) is at least 

1 w 1 -i^> 



200n 2 / V200n 2 n 3 y ~ 8n 6 

when n is large enough. This is in contradiction with the hypothesis. Therefore, the 
probability for two of the three colors must be less than concluding the proof. □ 

The next three lemmas tell us what test 3 actually implies. 

Lemma 2.11. Given that the quantum proof passes test 1 and part a) of test 2 with 
probability of failure less than then the probability of measuring |0) = -F 3 |0) in 
the Fourier basis on the color register is greater that 1/5 when n is large enough. 

Proof. Assume that the node register is measured. If the outcome is i, then the 
probability of obtaining |0) in the Fourier basis on the color register is given by 

glA,o + A,i + A, 2 | 2 - 

For all % with probability larger than 1/n 2 lemma 12.101 applies, in which case we 
can assume w.l.o.g that \f3 ifl \ 2 > 99/100 and \f3 it i\ 2 + |A j2 | 2 < 1/100. Using the 
Cauchy-Schwarz inequality, we obtain 

^IA,o + A,i + A, 2 | 2 > ^| |A,o|-|A,i + A )2 | | 2 



i, 

~ 3 1 
1 

> - 



IA,o| - ^/2(|A,i| 2 + IA, 2 | 
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Now, note that only n — 1 of the nodes can have a probability smaller than 1/n 2 , 
and therefore the probability of obtaining on the color register is at least 



^ 1 N 1 1 

U S 5 



for large enough n. 



□ 



Lemma 2.12. Given a state \X) = ^\ 7^|i) such that there exists an I with |7;| 2 < 
then the probability of not getting |0) = F n \0) when we measure \X) in the Fourier 
basis is at least 



16)i.- 



Proof. Let P and Q be the probability distribution when measuring \X) and F n \0) 
respectively in the computational basis. Using theorem 12.61 we get: 



l-\(X\0)\* = D(\X),\0)) 
>D{P,Q) 

1 



> 
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This implies that the probability of failing the test is greater than ^pr- □ 
Lemma 2.13. Assuming test 1, test 3 and part a) of test 2 succeed with probability 

1 i 1 2 1 

larger than then it must be that for all i, \ai\ > y^- 

Proof. Because of lemma I2.114 the probability of measuring on the color register 
while performing test 3 is at least 1/5. Let \X) = Yli 7«K) be the state after measuring 
on the color register. Suppose that there is an i such that \a\ 2 < l/(10n). Again, 
because of lemma [2. Ill it must be that |7j| 2 < 1/ (2n). Now, from that fact and lemma 
12.121 we conclude that it would fail test 3 with too large a probability. Therefore, 
for all i, H 2 > l/(10n) . □ 

Now, using lemmas I2.9f2.10[ 12.111 and 12. 13} it will be possible to prove the sound- 
ness of our verifier. 
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Theorem 2.14. If x ^ 3COL then all quantum proofs will fail the test with proba- 
bility at least 

Proof. Assume that the graph G is not 3 colorable and that it fails test 1, test 3 
and part a) of test 2 with probability smaller than ^g. Let C{i) = max., \/3ij\ be 
a coloring. Because of lemmas 12.91 and 12.101 this maximum is well defined. Since 
the graph is not 3-colorable, there exist two adjacent vertices v i and t>2 in G such 
that C(vi) = C(v2)- Because of lemma I2.13[ when performing test 2 we have a 
probability of at least l/(10n 2 ) of measuring C(t>i) in the first register, and because 
of lemmas 12.91 and 1 2. 131 we have a probability l/(10n 2 ) — 1/n 3 of measuring C(v2) 
in the second register. Putting this together, we have a probability larger than 
of failing condition b of test 2. □ 

3 Conclusion 

A very natural way to improve on our result would be (if it happens to be true) to 
prove that NP C QMAi og (2) even when the gap between soundness and complete- 
ness is constant rather than only when it is non- negligible. Some progress has been 
made in that direction by Peter Shor, who was able to get a constant gap for proofs 
of size A/nlog(n). |Sho07] 

Since one could guess a classical description of a very short quantum proof, one 
might believe that QMAi og (2) C NP and thus that QMAi og (2) = NP. Unfortu- 
nately, in order to get that result one must weaken our definitions of QMA log (2) so 
that the verifier can be simulated efficiently classically. 
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